Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: yf0JOmJ3ePPLwi1CZ3eGH5dXkMRC48BPEdS7JtUkAPo=
Subject key identifier: 39:D9:BF:50:5B:F1:C1:FA:82:DF:94:D3:C1:8D:51:11:F8:F5:E1:50
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 0199221EA687D57C5EFD87C501E6BC333248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 11EA
Signing time: Sun 07 Sep 2025 03:00:58 +0000
Manifest this update: Sun 07 Sep 2025 03:00:58 +0000
Manifest next update: Mon 08 Sep 2025 03:00:58 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: WXU7a5DD72MEYr0vnrq/IzswMT6pz+Z9OYZqMktggFg=)
2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a6:87:d5:7c:5e:fd:87:c5:01:e6:bc:33:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Sep 7 03:00:58 2025 GMT
Not After : Sep 8 03:00:58 2025 GMT
Subject: CN=39d9bf505bf1c1fa82df94d3c18d5111f8f5e150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:67:74:b7:9e:46:63:f0:9b:74:5c:c1:2d:
d9:a1:d8:6e:76:85:52:68:91:b6:d3:14:c6:bd:2c:
89:59:c5:be:97:e2:e3:ca:1a:31:8b:3c:dd:1b:61:
12:9c:8f:8d:39:9a:a0:c0:3b:4c:87:a8:82:80:b7:
71:e5:03:a9:2d:19:7e:74:61:01:70:1b:f8:44:fa:
74:f1:0d:aa:8b:5b:05:a7:ff:b2:e4:dc:36:1a:92:
79:e8:c9:cb:6c:12:b1:89:d1:8c:26:bf:95:07:5d:
da:35:3c:ae:88:bd:97:dd:03:99:6f:1b:60:26:03:
01:e4:e2:f1:54:b6:b9:3b:36:d7:93:60:eb:1c:c3:
ad:9e:95:4b:61:ad:08:19:7b:fe:a2:fc:82:1a:74:
6a:54:6a:6b:c2:ca:f1:c6:c4:4e:26:28:7f:f5:b0:
6c:52:3c:50:c7:9c:b8:f5:5f:5b:12:4b:26:81:02:
c9:00:65:8e:47:47:9b:35:fe:19:a7:78:b2:82:6b:
12:02:b0:3d:71:cc:0d:83:8a:83:fb:e9:d4:86:0d:
2f:55:5a:e4:2a:bd:1b:5e:30:0f:c9:35:ce:06:09:
87:f5:a7:14:84:d0:63:c3:72:5b:18:ff:f9:25:dd:
03:b0:94:27:7e:b5:c9:99:c0:ff:60:b3:06:6d:7e:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:BF:50:5B:F1:C1:FA:82:DF:94:D3:C1:8D:51:11:F8:F5:E1:50
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:48:47:33:50:3c:aa:60:68:f7:46:fa:bf:7c:b1:ac:80:
dc:76:42:ef:52:c8:4a:bf:8e:c7:20:3f:7b:1b:10:d9:7e:26:
50:d5:16:1b:7e:b6:f4:85:7b:11:bd:b6:c9:96:77:9f:d2:10:
14:45:83:04:e0:5f:ca:c3:4c:18:9c:9b:da:22:bb:72:12:65:
50:13:33:62:0a:6b:af:38:57:fc:70:85:27:62:3f:1c:a0:f7:
5d:2b:93:ae:bb:51:97:0e:78:8b:12:a8:0f:f4:f5:48:f7:8c:
05:d7:47:f9:31:30:7e:a5:f3:d5:b7:40:32:f2:7e:55:c6:59:
82:8a:df:6e:86:68:8a:75:fd:51:b5:8f:a7:89:95:67:76:4b:
e4:6f:56:2f:2c:0b:4c:7c:41:d9:e0:61:1f:4d:0f:5f:1c:6f:
57:46:c2:18:73:a2:c6:d9:b1:bd:70:98:ab:40:cb:88:b5:a8:
03:66:6e:fd:1d:86:da:32:f2:53:f2:d4:b4:9e:a3:ef:6b:a7:
04:a0:3c:5f:c4:37:39:9b:81:94:d3:48:7d:e9:ca:2f:d2:56:
24:43:3c:95:e3:ad:dc:22:8f:9a:b0:f4:a1:65:d6:e5:25:30:
eb:60:e5:de:c1:d4:22:92:21:5c:a1:cd:26:75:6f:60:fd:e2:
72:3a:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:53 2025 by rpki-client